zydronium/internetee-registry
1
0
Fork 0
mirror of https://github.com/internetee/registry.git synced 2025-05-30 01:20:04 +02:00
Code Issues Projects Releases Packages Wiki Activity

Fix SQL injection

Browse source 
#600
This commit is contained in:
Artur Beljajev 2017-10-04 01:37:03 +03:00
parent a82625c635
commit c6bd590b38
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
app/models/white_ip.rb
View file

@ -24,7 +24,7 @@ class WhiteIp < ActiveRecord::Base
class << self class << self
def include_ip?(ip) def include_ip?(ip)
where("#{table_name}.ipv4 = '#{ip}' OR #{table_name}.ipv6 = '#{ip}'").any? where('ipv4 = :ip OR ipv6 = :ip', ip: ip).any?
end end
end end
end end